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FIG. 4 
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Client negotiates Telnet se vices 
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Client signifies initial logoij sequence (APPUD) via asynch notification 

TN3270 Server passes cached certificate and APPLID to RACF in exchange for passticket 
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Client signifies logon with placeholders ($USR.ID$, $PSS.Wd)$) 
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3270 application traffic 



Client initiates new signon 
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Client signifies additional 
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3270 application traffic 



TN3270 Server opens SNA sessbn on client behalf 
data flows through TN3270 Server to client 



RACF returns passticket and user ID 



TN3270 Server inserts returned i iser ID and passticket into the 3270 d< tastream 



proceeds as before 



sequence, (APPLID) via asynch notification 



TN3270 Server passes existing 



RACF returns passticket and use r ID 
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Client Server 



Telnet negotiations in progress between Client and Server,. 

<- IAC DO NEW-ENVIRON 

IAC WILL NEW-ENVIRON -> 

<~ IAC SB NEW-ENVIRON SEND 
USERVAR PASSTICKET 
USERVAR APPLID 
IAC SE 

IAC SB NEW-ENVIRON IS --> 
USERVAR PASSTICKET VALUE YES 
USERVAR APPLID VALUE 
IAC SE 

Finish Telnet negotiations. 

~ Server sends USS MSG 1 0. 

Client starts Logon macro 



IAC SB NEW=ENVIRON INFO =«> 
525 1 USERVAR APPLID VALUE RALVMS 
IAC SE 
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FIG. 7 



740-^ 

Client application proceeds as before 
745* r 



750 



775-* 



702 

Web Appf 703 

Server Host System 

TN3270 Client TN3270 Server 

Client initiates SSL session using X.509 certificate 



701 

Browser 



706 
710 



704 
RACF 



Client interacts with WebApplication 

WebApplication opens TN3270 sfession on client behalf 



715 t 
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Client application proceeds 



WebApp indicates host appficath*n 
WebApp passes cached certifies te 



RACF returns passticket and user ID 



WfebApp inserts returned user IC 
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TN3270 application traffic proct eds as before 



Web appl indicates new he st application signon and optiona 



RACF returns passticket and user ID 



as before 



sigh-6h with certificate, 
and APPUD to RACF in exchange fbr passticket 



ly solicits APPLID via HTTP if not kno wn 



WebApp passes cached certifies it e and APPLID to RACF in exchange 



WebApp inserts returned user IDland pass t i ck et into the 3270 datastre^m 
TN3270 application traffic proce ids as before 



or passticket 



RSW9-2000-0035-US1 
|J. H. King, et al 
8 of 9 



FIG . 8 
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TN3270 Server opens SNA sessibn on client behalf 



815 



3270 Application data flows through TN3270 Server to client 



Client signifies initial togorj sequence (ApptID) via asynch n< tification 

TN3270 Server passes cached c irtificate and AppllD to RACF in exchange for passticket 
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Client signifies logon with placeholders ($USR.ID$, $PSS.WI)$) 

TN3270 Server inserts returned i rser ID and passticket into the 3270 ddtastream 
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3270 application traffic 
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3270 application traffic 



RACF returns passticket and use 7 ID 



proceeds as before 



Client initiates new and dif erent signon sequence, (APPUD, 



RACF returns passticket and user ID 



Client signifies additional ogon with placeholders ($USR.IC$, $PSS.WD$) 



proceeds as before 



new CERT, proof) via asynch not'rfica ion 



TN3270 Server passes new cert ficate and APPUD to RACF for passti 
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FIG. 9 

Client Server 



910 



Telnet negotiations in progress between Client and Server... 

<-- IAC DO NEW-ENVIRON 



IAC WILL NEW-ENVIRON 



<- IAC SB NEW-ENVIRON SEND 
USERVAR PASSTICKET 
USERVAR APPLID 
USERVAR CERTIFICATE 
USERVAR RSEEDrandomvalue 
USERVAR AUTHINFO 
IAC SE 



Server sends USS MSG10. 



IAC SB NEW-ENVIRON IS --> 
USERVAR PASSTICKET VALUE YES 
USERVAR APPLID VALUE 
USERVAR CERTIFICATE VALUE 
USERVAR RSEEDrandomvalue VALUE 
USERVAR AUTHINFO VALUE 
IACSE 

_Finish Telnet negotiations. 

Client starts Logon macro 

IAC SB NEW-ENVIRON INFO — > 
925| USERVAR APPLID VALUE RALVMS 
JACSE 

IAC SB NEW-ENVIRON INFO — > 
USERVAR APPLID VALUE TS01 
955 USERVAR CERTIFICATE VALUE certificate contents> 

USERVAR AUTHINFO <random || sequence number || applid value> 
IACSE 



